$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7dcfa543-51dc-47c0-8f4e-22ec5ceb6e3d.roa File: 7dcfa543-51dc-47c0-8f4e-22ec5ceb6e3d.roa (raw, json) Hash identifier: 2LuUzXaYMRJl9pAXPJuTM8wRusiyCfw7OG2vCVQ3uls= Subject key identifier: 04:A9:52:B2:75:36:09:6B:E1:01:56:E4:14:04:51:A0:F7:76:57:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A0EA6AA618E48C2DACCEFA0FA76314B26D6C4B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7dcfa543-51dc-47c0-8f4e-22ec5ceb6e3d.roa Signing time: Sun 04 Oct 2026 00:20:43 +0000 ROA not before: Sun 04 Oct 2026 00:20:43 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0e:a6:aa:61:8e:48:c2:da:cc:ef:a0:fa:76:31:4b:26:d6:c4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 4 00:20:43 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=9073611b841a9abbdcd0c04a8f17b3030f7f1c19d59142d889b214a73a068274, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:57:9f:32:a1:ec:48:50:d3:0c:98:9d:ab: 84:3b:21:f4:fe:04:2e:78:94:4b:e2:af:99:c0:d0: ef:e1:3b:bd:e7:cb:c6:9b:61:ae:1c:97:f6:73:a6: 9b:a1:0e:85:56:0e:aa:64:72:7e:c9:f6:a1:31:3b: 3e:fd:92:4d:49:cd:6f:25:41:38:bd:f4:ce:aa:5f: bd:d3:bf:c4:e0:8e:76:d0:63:8f:e8:ee:31:fb:ea: 0d:8c:05:72:03:6f:c0:1f:4a:ed:ee:0c:9d:17:a6: 20:28:a6:1c:37:3b:fd:53:46:9c:28:8f:15:bd:d7: 01:b8:6c:e0:c9:75:c1:ec:d3:49:bf:9c:53:81:03: f2:1e:5e:84:70:06:bf:f9:06:95:30:7c:52:87:3b: c9:f1:9b:6b:d6:2e:c8:5e:1a:68:59:a6:01:c3:06: 01:04:75:14:7b:5a:35:2f:b8:eb:b6:a2:b1:fd:d1: 91:c8:45:0c:d8:f0:a5:b9:1e:f5:f4:34:0b:63:5a: 3f:93:4d:a3:34:88:01:9a:7e:70:da:14:6a:67:1d: 7e:ed:89:8f:af:df:47:dc:18:df:17:57:93:22:03: 7d:56:cf:aa:cb:2f:95:2a:3b:9d:c7:b7:1c:98:eb: b5:ea:2b:8d:65:c6:58:27:fc:6e:da:73:02:d3:d7: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A9:52:B2:75:36:09:6B:E1:01:56:E4:14:04:51:A0:F7:76:57:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7dcfa543-51dc-47c0-8f4e-22ec5ceb6e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.224.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:5c:47:ff:35:f0:66:bb:94:e0:3e:6c:35:c5:c2:58:33:e7: a4:2a:19:a7:22:e6:30:e8:8f:17:68:3f:2c:01:bb:a5:94:cf: da:30:63:37:c6:18:d6:d8:a6:55:a9:66:f7:0b:41:04:f9:38: d9:53:0e:06:91:bb:f9:7f:60:ff:ad:a0:9d:6e:a0:d5:f2:47: aa:12:ef:ef:fd:63:a9:c1:29:a9:05:44:c8:12:14:75:f8:7e: ae:9a:e7:d3:0b:1a:9e:f0:1a:4d:2d:7f:4f:a6:32:a8:e4:8f: df:5e:78:1c:ea:73:25:7f:06:f8:62:e5:d1:ef:15:42:49:12: d7:bd:92:e7:b0:27:1b:a7:01:6d:6a:44:c0:1c:21:95:a1:aa: 76:6f:bc:20:92:27:3f:ae:fc:6b:41:23:c0:13:93:40:a2:25: f8:93:2e:37:76:22:4d:57:e6:ff:95:30:0b:c2:46:3a:1c:f0: 6d:99:45:15:ab:79:11:13:ca:0b:02:99:57:4a:11:d3:8b:4e: c7:64:be:b5:dc:cf:7c:23:ba:0f:ce:62:5f:c0:bb:f1:c3:d1: a0:42:9d:62:8c:7e:f8:36:f6:9b:22:f2:d6:dc:49:8b:41:e5: e1:40:f9:67:9e:3a:20:cb:06:52:4b:22:d2:6f:89:59:7e:40: e1:bc:8e:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGg6mqmGOSMLazO+g+nYxSybWxLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDA0MDAyMDQzWhcNMjcwMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDczNjExYjg0MWE5YWJiZGNkMGMwNGE4ZjE3YjMwMzBm N2YxYzE5ZDU5MTQyZDg4OWIyMTRhNzNhMDY4Mjc0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA81efMqHsSFDTDJidq4Q7IfT+BC54lEvir5nA0O/hO73n y8abYa4cl/ZzppuhDoVWDqpkcn7J9qExOz79kk1JzW8lQTi99M6qX73Tv8TgjnbQ Y4/o7jH76g2MBXIDb8AfSu3uDJ0XpiAophw3O/1TRpwojxW91wG4bODJdcHs00m/ nFOBA/IeXoRwBr/5BpUwfFKHO8nxm2vWLsheGmhZpgHDBgEEdRR7WjUvuOu2orH9 0ZHIRQzY8KW5HvX0NAtjWj+TTaM0iAGafnDaFGpnHX7tiY+v30fcGN8XV5MiA31W z6rLL5UqO53HtxyY67XqK41lxlgn/G7acwLT1wn3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBKlSsnU2CWvhAVbkFARRoPd2V2cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkY2ZhNTQzLTUxZGMtNDdjMC04ZjRlLTIyZWM1Y2ViNmUzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS9eAwDQYJKoZIhvcNAQELBQADggEBAJtcR/818Ga7lOA+bDXFwlgz56Qq Gaci5jDojxdoPywBu6WUz9owYzfGGNbYplWpZvcLQQT5ONlTDgaRu/l/YP+toJ1u oNXyR6oS7+/9Y6nBKakFRMgSFHX4fq6a59MLGp7wGk0tf0+mMqjkj99eeBzqcyV/ Bvhi5dHvFUJJEte9kuewJxunAW1qRMAcIZWhqnZvvCCSJz+u/GtBI8ATk0CiJfiT Ljd2Ik1X5v+VMAvCRjoc8G2ZRRWreRETygsCmVdKEdOLTsdkvrXcz3wjug/OYl/A u/HD0aBCnWKMfvg29psi8tbcSYtB5eFA+WeeOiDLBlJLItJviVl+QOG8jjI= -----END CERTIFICATE-----Generated at Sun Oct 4 20:09:45 2026 by rpki-client